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Abstract 

^ ' We provide here a proof theoretic account of constraint programming that attempts to 

, capture the essential ingredients of this programming style. We exemplify it by presenting 

proof rules for linear constraints over interval domains, and illustrate their use by analyzing 
, the constraint propagation process for the SEND + MORE = MONEY puzzle. We also show how 

J> ' this approach allows one to build new constraint solvers. 

OO : 

1 Introduction 

O 1 

t-H , 

OO , 1.1 Motivation 

ON ■ 

One of the most interesting recent developments in the area of programming has been constraint 
programming. A prominent instance of it is constraint logic programming exemplified by such 
j> \ programming languages as CLP (TZ), Prolog III or ECI/PS 6 . But recently also imperative con- 



X 
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straint programming languages emerged, such as 2LP of [17] or CLAIRE of ||. (For an overview 
of this area and related references see [f27f ). 

The aim of this paper is to explain the essence of this approach to programming without 
committing oneself to a particular programming paradigm. We achieve this by providing a 
simple proof theoretic framework that allows us in particular to explain constraint propagation, 
one of the cornerstones of constraint programming. 

The simplicity and elegance of constraint logic programming has already led to a general 
presentation of their operational semantics in [11| that easily can be casted in a proof theoretic 



jacket. But this account is limited to the logic programming view of constraint programming. 
Moreover, it treats constraint propagation as a further unexplained atomic action. Admittedly, 
the latter deficiency has been addressed in p3], where it has been explained how constraint 



propagation can be defined within the framework of [11]. 

In our approach we try to "decouple" constraint programming from logic programming 
by going back to the origins of constraints handling and by viewing computing as a task of 
transforming one constraint satisfaction problem (CSP) into another, equivalent one. To take 
into account reasoning by case analysis (that leads to "don't-know" nondeterminism and various 
forms of backtracking) we further introduce a splitting operation that allows us to split one CSP 
into two, the union of which is equivalent to the original CSP. The rules that govern this process 
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of transforming one CSP into a finite collection of them fall naturally into four categories and 
seem to be sufficient to describe the computation process. 

By providing such a general view of constraint programming we can use it to analyze the 
constraint programming process both within the logic programming paradigm and the impera- 
tive one. In particular, as we shall see in Sections || and ^ we can use it both to study existing 
constraint solvers and to build new ones. Additionally, as the Appendix shows, we can reason 
formally about the proposed rules. 

As a by-product of these considerations we bring constraint programming closer to the 
computation as deduction paradigm according to which the computation process is identified 
with a constructive proof of a formula (a query) from a set of axioms. This paradigm goes back 
to Herbrand and Godel and is exemplified by logic programming and functional programming 
and also by viewing the parsing process as a deduction (see e.g., pi]]), 

1.2 Related Work 

A number of papers have advocated theorem proving as a means to account for various aspects 
constraint logic programming. In particular, in || a Gentzen-style sequent calculus was used 
to develop a logical semantics of constraint logic programs and in [jlj] proof-theoretic techniques 
were applied to compare the intended theory and its actual implementation for various constraint 
logic programming systems. 

Next, a proof theoretic approach to constraint propagation within the constraint logic pro- 
gramming framework has been proposed in |f0|. In this work so-called constraint handling rules 
(CHR) have been introduced. CHR are available as part of the ECL*PS e system and allow the 
user to define his/her own constraint solvers. 



Further, a related to ours approach to constraint programming has been proposed in [| 




In this work constraint logic programs are identified with so-called if-and-only-if definitions 
augmented with integrity constraints. The if-and-only-if definitions are used to define the "usual" 
logic programming computation step while the integrity constraints are used to account for 
the constraint propagation process that is identified with a complete resolution strategy. This 
approach is further elaborated and generalized in |13]. 

Our view of constraint programming is also compatible with that expounded in p3| ] where 
constraint programming is presented without a commitment to a specific programming paradigm. 
In fact, our approach allows one to couch his concepts of propagators, inference engines and dis- 
tributors into a more specific, proof theoretic, framework. 

The approach here presented is closest to the one introduced independently in Q. Even 
though the overall objectives are essentially the same, the emphasis in his paper lies rather 
on defining specific techniques of constraint programming such as arc consistency and forward 
checking by means of proof rules and strategies. 

Finally, let us mention the following unsubstantiated remark that we found in page 
1115]: "In fact, virtually any form of constraint propagation can be defined in terms of rules of 
inference" . 

1.3 Preliminaries 

We recall here the relevant definitions. Consider a finite sequence of variables X := x\, . . .,x n 
where n > 0, with respective domains T> := D\, . . ., D n associated with them. So each variable 
Xi ranges over the domain D{. By a constraint C on X we mean a subset of D% x . . . x D n . If C 
equals D\ x . . . x D n then we say that C is solved. In the boundary case when the number n of 



2 



the variables equals we admit two constraints, denoted by T and _L, that denote respectively 
the true constraint (for example = 0) and the false constraint (for example = 1). 

By a constraint satisfaction problem, CSP in short, we mean a triple (X,T>,C), where C is a 
finite set of constraints, each on a subsequence of X. 

Given a CSP (X,T>,C) with X := x\, . . .,x n and T> := D±, . . .,D n , we say that an n-tuple 
(d±, . . .,d n ) £ D± x . . . x D n is a solution to {X, V, C) if for every constraint C £ C on a sequence 
Xi Y , . . . , Xi m of the variables from X we have 

{d il ,...,d im )eC. 

Below we represent a CSP (X,V,C) as an expression of the form (C ; T>£), where V£ := 
{x\ £ Di,...,x n £ D n }. We call a construct of the form x £ D a domain expression. We 
stress the fact that a domain expression is not a constraint. By considering domain expressions 
separately, we can focus in the sequel our attention on the proof rules that reduce domains. 
Such rules are very common when dealing with linear constraints and constraints on reals. 

An alternative approach that we did not pursue here, is to dispense with the domains by 
viewing each constraint as an n-ary relation and by associating with each domain a unary 
constraint that coincides with it. In this approach study of domain reduction becomes artificial. 

To simplify the notation from now on we omit the "{ }" brackets when presenting C and T>£ . 

We call a CSP solved if it is of the form (0 ; T>£) where no domain in V£ is empty, and 
failed if it either contains the false constraint _L or some of its domains is empty. So a failed 
CSP admits no solution. 

Given two CSP's <p and ip, we call (j) a variant of ip if the removal of solved constraints from 
(j) and -ip yields the same CSP. 

In what follows we assume that the constraints and the domain expressions are defined in 
some specific, further unspecified, language. In this representation of the constraints it is implicit 
that each of them is a subset of the Cartesian product of the associated variable domains. For 
example, if we consider the CSP (x < y ; x £ [0..10],y £ [5. .10]), then we view the constraint 
x < y as the set {(a, b) \ a £ [0..10],b £ [5. .10], a < b}. 

Given a constraint c on the variables x±, . . ., x n with respective domains D±, . . ., D n , and a 
sequence of domains D[, . . - ,D' n such that for i £ [l..n] we have D^Q Di, we say that d is the 
result of restricting c to the domains D[, . . ., D' n if d = c n (D[ x . . . x D' n ). 

2 The Proof Theoretic Framework 

In this section we introduce a proof theoretic framework that will be used throughout the paper. 
2.1 Format of the Proof Rules 

In what follows we consider two types of proof rules that we call deterministic and splitting. 
The deterministic rules are of the form 

t 

where 4> and tp are CSP's. We assume here that <f> is not failed and its set of constraints is 
non-empty. Depending on the form of the conclusion ip we distinguish two cases. Assume that 

:= (C ; V£) 

and 

iP := (C ; V£'). 
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• Domain reduction rules, or in short reduction rules. These are rules in which the new 
domains are respective subsets of the old domains and the new constraints are respective 
restrictions of the old constraints to the new domains. 

So here T>£ := x\ G D\,...,x n G D n , T>£' := x\ 6 D[,...,x n G D' n , for i G [l..n] we 
have D[ CD;, and C is the result of restricting each constraint in C to the corresponding 
subsequence of the domains D[ , . . . , D' n . 

Here a failure is reached only when a domain of one or more variables gets reduced to the 
empty set. 

When all constraints in C' are solved, we call such a rule a solving rule. 

• Transformation rules. These rules are not domain reduction rules and are such that C / 
and V£ C V£' . 

The inclusion between T>£ and T>£' means that the domains of common variables are iden- 
tical and that possibly new domain expressions have been added to T>£. Such new domain 
expressions deal with new variables on which some constraints have been introduced. 

Here a failure is reached only when the false constraint is generated. 
The splitting rules are of the form 



Ipl | V>2 

where cj>, ip\ and ip 2 are CSP's. As for deterministic rules we assume here that cj> is not failed 
and its set of constraints is non-empty. In what follows we only consider splitting rules in which 
(f>, ifji and ip2 are CSP's with the same sequence of variables. 

These rules allow us to replace one CSP by two CSP's. The intuition is that their "union" is 
"equivalent" to the original CSP. They are counterparts of the rules just introduced. So, again, 
we distinguish two cases. 

• Reduction splitting rules. These are rules such that both ^- and are reduction rules. 

• Transformation splitting rules. These are rules such that both ^- and ^ are transformation 
rules. 

2.2 Examples of Proof Rules 

In the sequel when presenting specific proof rules we delete from the conclusion all solved con- 
straints. Also, we abbreviate the domain expression x G {a} to x = a. 
As an example of a reduction rule consider the following rule: 

EQUALITY^ 

(x = y ; x G Djyy G D 2 ) 
(x = y ; x G D x n D 2 , y G D\ D D 2 ) 

Note that this rule yields a failure when D\ n D 2 = 0. In case D\ D D 2 is a singleton this 
rule becomes a solving rule, that is the constraint x = y becomes solved (and hence deleted). 
Note also the following solving rule: 
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EQUALITY^ 



(x = x ; x € D) 
(\x€D) 

Following the just introduced convention we dropped the constraint from the conclusion of 
the EQUALITY^ rule. This explains its format. 

As further examples of solving rules consider the following three concerning disequality: 

DISEQUALITY^ 

(x ^ x ; x G D) 
( ; x i 0) 

DISEQUALITY^ 

{x ^y ; x g D u y £ D 2 ) 
{ ; xeD 1 ,yeD 2 ) 

where L>i n £> 2 = 0, 

(x^y ; x £ D,y = a) 
( ; x e D - {a},y = a) 

where a £ D, and similarly with x ^ y replaced by y ^ x. 

So the DISEQUALITY^ rule yields a failure while the DISEQUALITY^ rule can yield a 
failure. 

Next, as an example of a transformation rule consider the following rule that substitutes a 
variable by a value: 

SUBSTITUTION 

(C ; V£,x = a) 
(C{x/a} ; VS,x = a) 

where x occurs in C. 

Here a stands for the constant that denotes in the underlying language the value a and 
C{x/a} denotes the set of constraints obtained from C by substituting in it every occurrence of 
x by a. So x does not occur in C{x/a}. 

Another example of a transformation rule forms the following rule: 

DELETION 

(C U {T} ; VS) 
{C ; VS) 
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Let us consider now the splitting rules. A natural class of examples of reduction splitting 
rules form domain splitting rules. These are rules of the form: 



(C ; VS,xe D) 
(C ; VS, x G D{) \ (C" ; VS, x G D 2 ) 

where D± U D 2 = D, Di ^ for i G {1, 2}, C is the result of restricting each constraint in C to 
the corresponding subsequence of the domains in VS and D±, and analogously with C". 
If such a rule does not depend on C and T>£ we abbreviate it to 

x £ D 
x e Di \ x e D 2 

Two specific instances are: 



ENUMERATION 

x G D 
x = a\ x£D — {a} 



where D is a finite domain with at least two elements and a £ D, and 



BISECTION 

x € [a..b] 
x G [a..s±*] I x i 



where [a. .6] a closed non-empty interval of reals. Here we wish to preserve the property that the 
intervals are closed so the new intervals are not disjoint. 

Finally, a natural class of examples of transformation splitting rules form constraint splitting 
rules. They have the following form: 

(C, C ; VS) 
(C,d ; VS) I (C,C 2 ; VS) 

where 

• every solution to (C,C ; VS) is a solution to (C, Ci ; or (C, C2 ; 

• every solution to (C,Ci ; P£) (i G [1,2]) is a solution to {C,C ; Pf). 
If such a rule does not depend on C and we abbreviate it to 

C 

C\ I c 2 

A particular instance is: 

\x — y\ = a 
x — y = a \ x — y = —a 

where x and y are integer variables and a is an integer. 
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2.3 Derivations 



Now that we have defined the proof rules, we define the result of applying a proof rule to a CSP. 
Assume a CSP of the form (C U C\ ; P U Pi). First, consider a deterministic rule, so a rule of 
the form 

(Ci ; Pi) m 

(C 2 ; P 2 ) 1 j 

Here a clash of variables can take place if some variable of C 2 also appears in C but not 
in C\. Then such a variable of C 2 should be renamed first. So let us rename the variables of 
(C 2 ; P 2 ) that appear in C but not in C\ by some fresh variables and denote the so obtained 
CSP by (C' 2 ; V' 2 ). 

We say that rule (Q) can be applied to (C U C\ ; PUPi) and call 

(Cu4 ; DU^) 

the result of applying rule (@) to (C U Ci ; P U Pi). If (C U C 2 ; PUDj) is not a variant 
of (C U C\ ; P U Pi), then we say that it is the result of a relevant application of rule ([[]) to 
(CUd; T>UV 1 ). 

Further, given a CSP <j> and a deterministic rule R, we say that 4> is closed under the appli- 
cations of R if either R cannot be applied to (p or no application of it to <f> is relevant. 

For example, assume for a moment the expected interpretation of propositional formulas and 
consider the CSP (j> := (x A y = z ; x = 1, y = 0, z = 0). Here a; = 1 is an abbreviation for the 
domain expression x £ {1} and similarly for the other variables. 

This CSP is closed under the applications of the transformation rule 

(x A y = z ; x = l,y £ D y , z € D z ) 
(z = y ; x = l,y € D y ,z e D z ) 

Indeed, this rule can be applied to <fi; the outcome is if) := (z = y ; x = l,y = 0, z = 0). 
After the removal of solved constraints from and 1/) we get in both cases the solved CSP 
(0 ; x = l,y = 0,z = 0). 

In contrast, the CSP <fi := (x A y = z ; x = 1, y G {0, 1}, z G {0, 1}) is not closed under the 
applications of the above rule because (z = y ; x = 1, y £ {0, 1}, z G {0, 1}) is not a variant of 

4>. 

Next, consider a splitting rule, so a rule of the form 

(Ci ; Pi) 



(Ca ; P 2 > I (C 3 ; P3) 
We then say that rule @ can be applied to (C U C\ ; P U Pi) and call 



(2) 



(C U C 2 ; P U P 2 ) I (C U C 3 ; P U P 3 ) (3) 

the result of applying it to (CUCi ; PUPi). If neither (CUC2 ; PUP 2 ) nor (CUC3 ; PUP3) is 
a variant of (C U C\ ; P U Pi), then we say that (||) is the result of a relevant application of rule 
@ to {CUd ; P U Pi). (Recall that by assumption all three CSP's (d ; Pi), where % G [1..3], 
have the same sequence of variables, so we do not need to worry here about variable clashes.) 
Finally, we introduce the notions of a proof tree and of a derivation. 

Definition 2.1 Assume a set of proof rules. A proof tree is a tree the nodes of which are CSP's. 
Further, each node has at most two direct descendants and for each node cj> the following holds: 
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• If <fi is a leaf, then no application of a rule to ip is relevant; 

• If (j) has precisely one direct descendant, say ijj, then tp is the result of a relevant application 
of a proof rule to <j>; 

• If has precisely two direct descendants, say Vi and ip2, then tpi | ^2 is the result of a 
relevant application of a proof rule to <p. 

A derivation is a branch in a proof tree. A derivation is called successful if it is finite and 
its last element is a solved CSP. A derivation is called failed if it is finite and its last element is 
a failed CSP. □ 

The idea behind the above definition is that we consider in the proof trees only those ap- 
plications of the proof rules that cause some change. Note also that more proof rules can be 
applicable to a given CSP, so a specific CSP can be a root of several proof trees. 

Note that some finite derivations are neither successful nor failed. In fact, many constraint 
solvers yield CSP's that are neither solved nor failed — their aim is to bring the initial CSP to 
some specific, simpler form. 

In some cases this third possibility does not arise. Indeed, consider a non-failed CSP with a 
non-empty set of constraints on finite domains. Then either the DELETION or the SUBSTI- 
TUTION or the ENUMERATION rule can be applied to it and moreover each such application 
is always relevant. So in presence of the above three rules for CSP's with finite domains each 
finite derivation is either successful or failed. 

2.4 Equivalent CSP's 

We introduced the proof rules so that we can reduce one CSP to another CSP or to two CSP's, 
which are in some sense "smaller" yet "equivalent" . Both notions can be made precise but the 
first one will not play any role in our considerations, so we only present an adequate notion of 
equivalence. Because the considered proof rules are of a specific form, we limit ourselves in the 
definition to specific pairs of CSP's. 

Definition 2.2 Consider two CSP's (j) and ip such that all variables of (f> are also present in tp. 
We say that the CSP's 4> and ip are equivalent if 

• every solution to 4> is or can be extended to a solution to ip, 

• for every solution to tp its restriction to the variables of (j) is a solution to <p. □ 

In particular, two CSP's with the same sequence of variables are equivalent if they have the 
same set of solutions. So for example the CSP's 

(3x - 5y = 4 ; x G [0..9],y G [1..8]) 

and 

(3x - 5y = 4 ; x G [S..8],y G [I. A}} 

are equivalent, since both of them have x = 3, y = 1 and x = 8, y = 4 as the only solutions, and, 
for V£ := x G D x , y G D y , z G D z , so are 

(x <y,y < z ; T>6) 



8 



and 

(x<y,y<z,x<z; T>£). 

In contrast, 

(x < z ; x E D x , z G _D 2 ) 

and 

(x <y,y < z ; V£) 

are not equivalent, as not each solution to the former extends to a solution of the latter. 

This brings us to the following notion where we make use of the fact that the considered 
proof rules are of a specific form. 

Definition 2.3 

(i) A proof rule 

i 

is called equivalence preserving if 4> and ip are equivalent. 

(ii) A proof rule 

is called equivalence preserving if 

• every solution to is a solution to ipi or to ife, 

• every solution to ipi (i G [1, 2]) is a solution to 0. □ 

All the rules discussed so far are equivalence preserving. From the way we introduce the 
proof rules in the sequel it will be clear that all of them are also equivalence preserving. 

This completes the presentation of our proof theoretic framework. In order to use it to model 
constraint programming the proof rules above introduced have to be "customized" to a specific 
language in which constraints are defined and to specific domains. In what follows we present 
an example of such a customization that deals with linear constraints over interval and finite 
domains. 

Such rules should be selected and scheduled in an appropriate way and some strategy should 
be employed to traverse the generated proof trees. We defer discussion of these issues to Sub- 
section |5.2| . 

3 Linear Constraints over Interval Domains 

In this section we consider linear constraints over interval domains. We use the introduced rules 
to discuss the behaviour of the ECL l PS e finite domain solver and, by means of an example, to 
analyse the SEND + MORE = MONEY puzzle. 

First, let us recall the relevant definitions. By a linear expression we mean a term in the 
language that contains two constants and 1, the unary minus function — and two binary 
functions + and — , both written in the infix notation. We abbreviate terms of the form 




n times 
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to n, terms of the form 



x + . . . + x 
* .. ' 



n times 

to nx and analogously with —1 and — x used instead of 1 and x. So (using appropriate trans- 
formation rules) each linear expression can be equivalently written in the form 



where n > 0, a±, . . .,a n are non-zero integers, different variables and a n +i is an 

integer. 

By a linear constraint we mean a formula of the form 



where s and t are linear expressions and op € {<,<,=, 7^, >,>}• In what follows we drop the 
qualification "linear" when discussing linear expressions and linear constraints. 
Further, we call 

• s < t and s > t strict inequality constraints, 

• s < t and s > t inequality constraints, 

• s = t an equality constraint, 

• s 7^ t a disequality constraint, 

• x ^ y, for variables x, y, a simple disequality constraint. 

By an integer interval, or an interval in short, we mean an expression of the form 



where a and b are integers; [a..b] denotes the set of all integers between a and b, including a and 
b. If a > 6, we call [a.. 6] the empty interval. 

Finally, by a range we mean an expression of the form 



where x is a variable and / is an interval. We abbreviate x £ [a..b] to x = a if a = b and write 
x <G if a > b. 

In what follows we discuss various rules that allow us to manipulate linear constraints over 
interval domains. We assume that all considered linear constraints have at least one variable. 

3.1 Reduction Rules for Inequality Constraints 

We begin with the inequality constraints. Using appropriate transformation rules each inequality 
constraint can be equivalently written in the form 



aixi + . . . + a n x n + a n+ i 



s opt 



[a..b] 



x £ I 



iepos 



^2 aiXi < b 

ieNEG 



(4) 



where 
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• dj is a positive integer for i E POS U NEG, 

• x,- and X j £1X6 different variables for i ^ j and i, j E POS 1 U NEG, 

• b is an integer. 
Assume the ranges 

Xi E [k..hi] 

for t E POS U iVEG. 

Choose now some j E P05 and let us rewrite (0) as 



— SiGP05-{j} a i x i + J2i£NEG a i x i 



Computing the maximum of the expression on the right-hand side w.r.t. the ranges of the 
involved variables we get 

Xj < aj 

where 

_ b ~ J2iePOS-{j} a ili + J2i£NEG a ihi 



so, since the variables assume integer values, 

Xj < [o,-J. 

We conclude that 

xj E [lj..min(hj, [cxj\)]- 
By analogous calculations we conclude for j E NEG 

Xj > \Pj] 

where 

_ — b + Y,i£POS a di ~ J2i£NEG-{j} a ihi 
fjj : — 

Gj 

In this case we conclude that 

Xj E [max(lj, \/3j~\)..hj]. 
This brings us to the following reduction rule for inequality constraints: 

LINEAR INEQUALITY^ 

(Y,i£PQS a i X i ~ Y,i£NEG a i x i ^ \ \ X\ E [h-M], ■ ■ -,X n E [l n --K]) 
{12i£POS a i x i ~ J2i£NEG a i x i — b ] X\ € [Z^..^], . . .,X n E [l' n -h' n ]) 

where for j E POS 

l'j := lj, h'j := min(hj, |_ayj) 

and for j E NEG 

lj := max(lj, hj := hj. 
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3.2 Reduction Rules for Equality Constraints 

Each equality constraint can be equivalently written as two inequality constraints. By combining 
the corresponding reduction rules for these two inequality constraints we obtain a reduction rule 
for an equality constraint. More specifically, each equality constraint can be equivalently written 
in the form 

X! a i X i ~ ^2 aiXi = b ( 5 ) 

iepos ieNEG 

where we adopt the conditions that follow (||) in the previous subsection. 
Assume now the ranges 

xi g [h-h], ...,x n e [l n -h n ]. 

We infer then both the conclusion of the LINEAR INEQUALITY^ reduct ion rule and 

xi G [l"..h"],...,x n G [l'n-K] 

I" := max(lj, |~7j]), h" := hj 

b — Hi£POS-{j} a ihi + YsieNEG 
dj 

lj := lj, hj := min(hj, [5jj) 

— b + Hi^POS a ihi — J2i£NEG-{j} a ili 

This yields the following reduction rule: 

LINEAR EQUALITY 

(52iePOS a i x i ~ X^ig NEG a i x i = b ', X\ G [Zi-./ti] , . . ., X n G [l n ..h n ]} 
(J2iePOS a i x i ~ J2ieNEG a i x i = b ', X\ G [/p./l^], . . ., X n G [l' n -h' n ]) 

where for j G POS 

l'j := max(lj, h'j := min(hj, [ctj\) 

and for j G NEG 

l'j := max(lj, \(3j~\), h'j := min(hj, [6j\). 

As an example of the use of the above reduction rule consider the CSP (3x — 5y = 4 ; x G 
[0..9],y G [1..8]). A straightforward calculation shows that x G [3. .9], y G [1..4] are the ranges in 
the conclusion of LINEAR EQUALITY rule. Another application of the rule yields the ranges 
x G [3.. 8] and y G [1-.4] upon which the process stabilizes. 

Note that if in (|5|) there is only one variable, the LINEAR EQUALITY rule reduces to the 
following solving rule: 

(ax = b ; x G [l..h]) 

(; xe{>Ml) 

So, if a divides b and I < - < h, the domain expression x = - is inferred, and otherwise a failure 
is reached. 



where for j G POS 
with 

and for j G NEG 
with 



12 



3.3 Transformation Rules for Inequality and Equality Constraints 

The above reduction rules can be applied only to inequality and equality constraints that are in 
a specific form, (|j) or (|5|). So we need to augment the introduced reduction rules by appropriate 
transformation rules. Depending on the level of description one can content oneself with a couple 
of general rules or several very detailed ones. These rules are pretty straightforward and are 
omitted. 



3.4 Rules for Disequality Constraints 

The reduction rules for simple disequalities are very natural. First, note that the following rule 

SIMPLE DISEQUALITY^ 

(x j^y ; x G [a..b],y G [c.d]} 
( ; x G [a..b],y G [c..d\) 

where b < c or d < a, is an instance of the DISEQUALITY solving rule introduced in 



Subsection 2.2 and where following the convention there mentioned we dropped the constraint 
and the domain expressions from the conclusion of the proof rule. 

Next, we adopt the following two solving rules that are instances of the solving DISEQUAL- 
/Tr|rule: 

SIMPLE DISEQUALITY^ 

(x ^ y ; x G [a..b],y = a) 
( ; x G [a + l..b],y = a) 

SIMPLE DISEQUALITY^ 

(xj£yj x G [a..b],y = b) 
( ; x G [a..b -l],y = b) 

and similarly with x ^ y replaced by y ^ x. Recall that the domain expression y = a is a 
shorthand for y G [a.. a]. 

To deal with disequality constraints that are not simple ones we use the following notation. 
Given a linear expression s and a sequence of ranges involving all the variables of s we denote 
by s~ the minimum s can take w.r.t. these ranges and by s + the maximum s can take w.r.t. 



these ranges. The considerations of Subsection 3.1 show how s and s + can be computed 



We now introduce the following transformation rule for non-simple disequality constraints: 

DISEQUALITY^ 

(s?t; VS) 

(x 7^ t, x = s ; x G [s~ ..s + ],V£) 

where 

• s is not a variable, 

• x is a fresh variable, 

• T>£ is a sequence of the ranges involving the variables present in s and t, 

• s~ and s + are computed w.r.t. the ranges in T>£. 

An analogous rule is introduced for the inequality s ^ t, where t is not a variable. 
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3.5 Domain splitting rules 

We conclude our treatment of linear constraints over interval domains by presenting three specific 
domain splitting rules. Because at the moment the assumed domains are intervals, these rules 
so designed that the domains remain intervals. 

INTERVAL SPLITTING^ 

x G [a..b] 
x = a | x G [a + 1..6] 

where a < b, 

INTERVAL SPLITTING^ 

x G [a..b] 
x = b | x G [a..b — 1] 

where a < b, 

INTERVAL SPLITTING^ 

(i/c; x G [a..b]) 
(; i£ [a..c - 1]) | ( ; x G [c + 1..6]) 

where a < c < b. 

Finally, to deal with the strict inequality constraints it suffices to use expected transformation 
rules that reduce them to inequalities and disequalities. 

3.6 Shifting from Intervals to Finite Domains 

In our presentation we took care that all the rules preserved the property that the domains 
are intervals. In some systems, such as ECI/PS 6 , this property is relaxed and instead of finite 
intervals finite sets of integers are chosen. To model the use of such finite domains it suffices to 
modify some of the rules introduced above. 

In the case of inequality constraints we can use the following minor modification of the 
LINEAR INEQUALITY^ reduction rule: 

LINEAR INEQUALITY^ 

iGPOS a i x i ~ Tlii^NEG a i x i — b i X± dz D\, . . ., X n G D n ) 
(J2i&POS a i x i ~ Y.i£NEG a i x i < b 5 x l G [ l l~ h 'l\ n D l> • • •> x n € K-K] n D n) 

where I'j and hj are defined as in the LINEAR INEQUALITY^ reduction rule with l d := 
min(Dj) and hj := max(Dj). 

Note that in this rule the domains are now arbitrary finite sets of integers. An analogous 
modification can be introduced for the case of the reduction rule for equality constraints. 

In the case of a simple disequality constraint we use the DISEQUALITY^ solving rule. So 
now, in contrast to the case of interval domains, an arbitrary element can be removed from a 
domain, not only the "boundary" one. 
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3.7 Example: the SEND + MORE = MONEY Puzzle 



We now illustrate use of the above rules for linear constraints over interval and finite domains by 
analyzing in detail the well-known SEND + MORE = MONEY puzzle. Recall that this puzzle 
calls for a solution of the equality constraint 



1000 • S + 100 • E + 10 • N + D 
+ 1000 • M + 100 • O + 10 • R + E 
= 10000 • M + 1000 • O + 100 • N + 10 • E + Y 

together with 28 simple disequality constraints x ^ y for x, y G {S, E, N, D, M, O, R, Y} where 
x preceeds y in the alphabetic order, and with the range [1..9] for S and M and the range [0..9] 
for the other variables. 

Both in the CHIP system (see g|, P a S e 143 D and in ECLTS 6 Version 3.5.2. the above CSP 
is internally reduced to the one with the following domain expressions: 

S = 9,E e [4. .7], N G [5..8},D G [2..8],M = l,O = 0, Re [2..8},Y G [2..8]. (6) 

We now show how this outcome can be formally derived using the rules we introduced. 

First, using the transformation rules for linear constraints we can transform the above equal- 
ity to 

9000 ■ M + 900 • O + 90 • N + Y - (91 • E + D + 1000 • S + 10 • R) = 0. 

Applying the LINEAR EQUALITY reduction rule with the initial ranges we obtain the following 
sequence of new ranges: 

S = 9,E G [0..9],JV G [0..9],D G [0..9],M = 1, O G [0..1],R G [0..9],Y G [0..9]. 

At this stage a subsequent use of the same rule yields no new outcome. However, by virtue of 
the fact that M = 1 we can now apply the SIMPLE DISEQUALITY^ solving rule to M ^ O to 
conclude that O = 0. Using now the facts that M = 1, O = 0, S = 9, the solving rules SIMPLE 
DISEQUALITY^ and [| can be repeatedly applied to shrink the ranges of the other variables. 
This yields the following new sequence of ranges: 

S = 9,E G [2..8],N G [2..8],D G [2..8],M = 1,0 = 0,R G [2..8],Y G [2..8]. 

Now five successive iterations of the LINEAR EQUALITY reduction rule yield the following 
sequences of shrinking ranges of E and iV with other ranges unchanged: 



E G [2..7],N G [3..8], 

E G [3..7],N G [3..8], 

E G [3. .7], iV G [4..8], 

E G [4..7],JV € [4..8], 

E G [4. .7], iV G [5..8], 
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upon which the reduction process stabilizes. At this stage the solving rules for disequalities are 
not applicable either. 

So using the reduction rules we reduced the original ranges to (^). The derivation, without 
counting the initial applications of the transformation rules, consists of 24 steps. 

Using the SUBSTITUTION rule of Subsection |2.2j and obvious transformation rules that 
deal with bringing the equality constraints to the form (||), the original equality constraint gets 
reduced to 

90 • N + Y - (91 • E + D + 10 • R) = 0. 

Moreover, ten simple disequality constraints between the variables E, N, D, R and Y are still 
present. 

Further progress can now be obtained only by employing a splitting rule. The behaviour of 
the ECT/PS 6 finite domain solver is modelled by the ENUMERATION rule of Subsection |J. 
It can be shown, by mimicking the ECI/PS e execution, that, when the rules here presented are 
augmented by this rule, there exists a successful derivation for the original CSP representing 
the SEND + MORE = MONEY puzzle. 

3.8 Discussion 

This concludes our presentation of the proof rules that can be used to build a constraint solver 
for linear constraints over interval and finite domains. Such proof rules are present in one form 
or another within each constraint programming system that supports linear constraints over 
interval and finite domains. 

It is worthwhile to mention that the reduction rules LINEAR INEQUALITY^ and LINEAR 
EQUALITY are simple modifications of the reduction rule introduced in || page 306] that dealt 
with closed intervals of reals. Also, as pointed out to us by Lex Schrijver, these rules are instances 
of the cutting-plane proof technique used in linear programming (see e.g. ||, Section 6.7]). 

4 Building a Constraint Solver: an Example 

We now show how one can use our approach to define specific constraint solvers. By means of 
example consider the constraint exactly (x, I, z) introduced in |26|| . It states that for a list / of 
variables ranging over some fixed domain exactly x of its elements equal z. We assume that this 
primitive can be used with x a variable ranging over a subset of natural numbers and with z a 
variable with an unspecified domain. (This is not a restriction since we can augment the rules 
below with some natural variable introduction rules.) The exactly (x, I, z) primitive is useful for 
dealing with scheduling problems. 

Below we assume that m > 0, i G [l..m] and that T>8 stands for a sequence of domain 
expressions involving the relevant variables. Further, given a set D of natural numbers, we 
define 

D-l := {d-1 | de D,d> 0}. 
The behaviour of the exactly (x,l,z) primitive is described by means of the following four rules: 

EXACTLY^ 

{exactlyjx, [yi,.. ., y m ], z) ; x g D X ,V£) 

{exactly(x, [yi,.. ., y m ],z) ; x E D x — {d \ d > m},T>£) 
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EXACTLY^ 

(exactly (x,[yi,---,ym],z) ; yi £ Dj,z £ D Z ,T>£) 

(exactly (x,[y! , . . .,yi-i , yi+i , . . ., y m ], z) ; yi £ D i} z £ D Z ,V£) 

where Di n D z = and m > 1, 

EXACTLY 3 

(exactly (x, [yi,.. ., t/ m ], z) ; x £ D x ,yj = a,z = a,T>£) 

(exactly (u, [yi,.. ., yi-i,y i+ i,. . ., y m ], z),u = x- 1 ; u £ D x - l,x £ D x ,yi = a,z = a,V£) 

EXACTLY^ 

(exactly (x,[y y m ],z) ; x = 0,V£) 
(yi z, . . ., y m + z ; x = 0, £>£) 

It is straightforward to see that these four rules are equivalence preserving. These rules, 
when augmented with a modification of the LINEAR EQUALITY rule for finite domains, 
DISEQUALITY [], | and rules and the ENUMERATION rule, form a stand alone constraint 
solver. 

Such a solver can be directly used for example to solve Latin square puzzles. (Recall that a 
Latin square of order n is defined to be an n x n array made out of the integers 1, 2, . . ., n with 
the property that each of the n symbols occurs exactly once in each row and exactly once in 
each column of the array.) 

More importantly, the exactly (x,l,z) primitive has been used to specify certain type of schedul- 
ing problems, such as the car sequencing problem (see |2^| ). Also, it can be used in turn to 



define other useful constraint primitives, such as the atmost(x,l,z) primitive of [26] that states 
that for a list I of variables ranging over some fixed domain atmost x of its elements equal z. 
To this end it suffices to adopt the following rule 

(atmost (x, I, z) ; x £ D X ,T>£) 



(exactly (y, l,z),y <x ; y £ D x ,x £ D X ,V£) 



and add an instance of the LINEAR INEQUALITY^ rule that deals with simple inequalities 
of the form y < x. 



5 Conclusions 

5.1 Summing up 

We presented here a proof theoretic framework that allows us to model computing using con- 
straints. 

In general, constraint programming consists of a generation of constraints and of solving 
them. Both phases can be intertwined. In our presentation we only concentrated on the latter 
aspect of constraint programming. To complete the picture the framework here presented should 
be combined with a specific "host" programming language from which the constraints can be 
generated. To model computing in such an amalgamated language the proof rules should be 
combined with transitions dealing with the program state. In such a constraint programing 
language one can distinguish two computation steps. 
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• If a "conventional" programming statement (such as a procedure call or a built-in in 
the logic programming framework, or an assignment or a WHILE loop in the imperative 
programming framework) is encountered, a usual transition is performed and the program 
state is modified accordingly. 

• If a constraint is encountered, it is added to the current set of constraints ("constraint 
store"). This addition is followed by a repeated application of the proof rules to the 
constraint store. The order of application of these rules is determined by some built- 
in scheduler (see the next subsection). The terminating condition depends on specific 
applications. 

Further, in such an amalgamated language the interaction between the constraint store and 
the program state should be properly taken care of. 

In the case of linear constraints on finite domains the deterministic proof rules are repeatedly 
applied until all constraints are solved or a CSP is generated that is closed under the applications 
of these rules. In the case of algebraic constraints on real intervals the proof rules are repeatedly 
applied until all constraints are solved or all intervals are smaller than some fixed in advance e. 

In some constraint programming languages or in the case of some constraint solvers the 
splitting rules are not scheduled. Instead, their application is explicitly triggered by some 
programming construct or facility present in the language. 

Let us compare now in more detail our approach to that of ||] and |i0|| . In || the proof 
rules are represented as rewrite rules in the programming language ELAN (for the most recent 
reference see H). ELAN allows one to define specific strategies that can be used to schedule 
these rewrite rules. We defer discussion of this aspect to the next subsection. 

In constraint handling rules (CHRs) of |Kj the rules manipulate constraints only, so the 
domains need to be encoded as unary constraints. This leads to a different than ours classification 
of rules according to which "propagation" means addition of redundant constraints. Further, 
these rules are not supposed to be used "stand alone" but rather to augment constraint logic 
programming that provides already a support for the "don't know" nondeterminism. So no 
splitting rules are available. 

So the implementation of constraint solvers defined by the ELAN rules and by CHRs is 
automatically provided by the interpreter, respectively compiler of the language. In contrast, 
our approach is not geared towards direct implementability even though an implementation 
specified by such rules is pretty obvious. This allows us to be more abstract and permits us to 
express and analyze specific, domain dependent, constraint solvers in a simple way. 

For example we can readily define proof rules that involve some auxiliary computations, such 
as the LINEAR INEQUALITY reduction rule of Subsection [T^ and study formally properties 
of such rules (see Appendix). Such an analysis would be difficult to achieve if we had to reason 
about an encoding of these rules in a specific programming formalism. 



5.2 Control 

One of the issues conspicuously absent in our considerations is that of control. To draw the 
analogy with the "Algorithm = Logic + Control" slogan of [12], what we defined here is only 
the "Logic" part of constraint programming. The picture is completed once we can adequately 
deal with the "Control" part. 

In the proof theoretic framework here presented the issue of control enters the picture at 
three places. First, one needs to schedule the introduced proof rules. Second, one should be able 
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to define which rules are to be scheduled. Finally, one needs some search strategy to traverse 
the generated proof trees in search for a successful derivation. 

The scheduling of the proof rules could be done using a built-in strategy that combines 
scheduling of the deterministic rules by means of a generic chaotic iteration algorithm of 
with the requirement that the applications of the splitting rules are delayed as much as possible. 
We noted in Q that several constraint propagation algorithms employ in fact such a generic 
algorithm. Further, delay of the applications of the splitting rules prevents unnecessary creation 
of alternative branches and is a well-known and widely used heuristic. So such a "hard-wired" 
strategy seems perfectly reasonable. 

In contrast, we think that both the selection of specific proof rules and the search strategies 
for traversing the proof trees should be programmable. What we need here is a programming 
notation that could allow us to define most common search strategies in a simple way. One 
possibility would be to use ELAN that, as already mentioned, allows one to define various search 
strategies. § showed how several of them, such as forward checking and various forms of look 
ahead, can be implemented in ELAN. We believe that more work is needed to see whether other 
strategies such as backjumping can be expressed in ELAN, as well. 

Another work that should be mentioned here is |^] where it is shown how the concept of 
so-called computation spaces can be used to program in a simple way various search strategies 
in the programming language Oz (sec J22|] ). 
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Appendix: a Characterization of the LINEAR EQUALITY Rule 

The rules we introduced in Section |3| seem somewhat arbitrary. After all, using them we cannot 
even solve the CSP (x + y = W, x — y = ; x G [0..10],y £ [0..10]} as no application of the 



LINEAR EQUALITY rule of Subsection to this CSP is relevant. 

The point is that the domain reduction rules like the LINEAR EQUALITY rule are in some 
sense "orthogonal" to the rules that deal with algebraic manipulations (that can be expressed 
as transformation rules): their aim is to reduce the domains and not to transform constraints. 
So it makes sense to clarify what these rules actually achieve. This is the aim of this section. 
By means of example, we concentrate here on the LINEAR EQUALITY rule. 

To analyze it it will be useful to consider first its counterpart that deals with the intervals of 
reals. This rule is obtained from the LINEAR EQUALITY rule by deleting from the definitions 
of lj and h'j the occurrences of the functions [ ] and [ J . So this rule deals with an equality 
constraint in the form 

^2 a i x i ~ aiXi = b 

iePOS ieNEG 

where 

• dj is a positive integer for i G POS U NEC, 

• Xi and Xj are different variables for i ^ j and i, j G POS U NEC, 

• 6 is an integer, 

and intervals over reals. 

In what follows for two reals r\ and r2 we denote by [ri,r2] the closed interval of real line 
bounded by r\ and r2- So ir G [3,4] while [3. .4] = {3,4}. 

The rule in question has the following form: 
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TZ-LINEAR EQUALITY 



(SiePOS a i x i ~ ^2i£NEG a i x i ~ b > x l € [^l"^l]> • • n x n £ [^n--^-n]} 
(SjePOS a i a; i ~~ J2ieNEG a i x i = b i x l € • • •> x n £ K"^nl) 

where for j 6 POS* 

:= max(lj,7j), h T j := min(hj,aj) 

and for j E 7VPG 

:= max(lj, (3j), hj := min(hj,5j). 
Recall that ay, /?,-, 7,- and 5, are defined in Subsection |3.2| , In particular, recall that 

b ~ YsizPOS-U} a di + J2i£NEG a i a i 
Ctj = — 

and 

b — Hi£POS-{j] a i a i + HieNEG a rfi 
1j := „ 



It is straightforward to see that the TZ-LINEAR EQUALITY rule, when interpreted over 
the intervals of reals, is also equivalence preserving. 

To characterize the TZ-LINEAR EQUALITY rule we use the following notion introduced in 
[18]. The original definition for binary constraints is due to fl5| ]. 

Definition 5.1 

• A constraint C is called arc- consistent if for every variable of it each value in its domain 
participates in a solution to C. 

• A CSP is called arc- consistent if every constraint of it is. □ 
We now prove the following result. 

Theorem 5.2 

(i) The conclusion of the TZ-LINEAR EQUALITY rule is either failed or arc consistent. 

(ii) In the case of a single linear equality constraint the TZ-LINEAR EQUALITY rule is idem- 
potent, that is a CSP is closed under the application of this rule after one iteration. 

(in) In the case of more than one linear equality constraint the TZ-LINEAR EQUALITY rule 
can yield an infinite derivation. 

Proof, (i) Assume that the conclusion of the TZ-LINEAR EQUALITY rule is not failed. Fix 
j E POS. We have both 

atk + ajctj — Oj/ij = b 

i&POS-{j} ieNEG 

^2 a ihi + djjj - ^2 = b- 

iePOS-{j} ieNEG 



and 
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Hence for any a 



a( ai(li - hi) + aj(aj - -jj) - ^ cbiih - k)) = 0, 

i(LPOS~{j} ^ NEG 

so for any a 

Y ai(hi + a(k - hi)) + aj(jj + a(aj - - ^ ai(k + afc — k)) = b. (7) 

iePOS-{j} ^ NEG 

By the definition of lj and K we have [lj, hj] C [7^, ay]. By the initial assumption the interval 
is non-empty. 

Take now some d £ [lj, Kj]. Next, take a such that jj + a (ay — 7?) = d, that is 

a := — 

and choose the solution to Yli^pos a i x i ~ J2ieNEG a i x i = ^ determined by a and (0). 

By the choice of d and the fact that [lj,h r j] is non-empty, a is well-defined and < a < 1. 
Hence this solution to J2iePOS a i x i ~ ^ieNEG a i x i = & nes ™ * ne ranges [Zi-./ij] with i € [l..n]. 
But the 1Z-LINEAR EQUALITY rule is equivalence preserving, so this solution also lies in the 
ranges [Z|"../fc^] with i £ [l..n]. This proves the claim. 

(ii) Straightforward by (i) as the domains of an arc consistent CSP cannot be reduced without 
losing equivalence. 

(iii) The following example is due to ||, page 304]. Take (x = y, x = 2y ; x G [0, 100], y € [0, 100]) 
and consider a derivation in which the constraints are selected in an alternating fashion. This 
derivation is easily seen to be infinite. □ 

Let us mention here that property (i) generalizes a corresponding result stated in [||, page 
326] for the more limited case of so-called unit coefficient constraints. 

In contrast, the LINEAR EQUALITY rule behaves differently. First, it is not idempotent 
even in the case of a single linear equality — it just suffices to see the example at the end of 
Subsection |3[^. Second, in the case of several linear equality constraints its repeated use always 
terminates (due to the fact that the domains are finite) and yields a CSP that is closed under 
the applications of this rule (by the fact that it is equivalence preserving). 

Further, the example at the end of Subsection |3.2| also shows that a CSP closed under the 
applications of this rule does not need to be arc consistent. So we need another notion to 
characterize CSP's closed under the applications of this rule. 

First, we introduce the following terminology. 

Definition 5.3 

• By an ICSP we mean a CSP the domains of which are intervals of reals or integers. 

• A constraint C on a non-empty sequence of variables, the domains of which are intervals 
of reals or integers, is called bound consistent if for every variable of it each of its two 
bounds participates in a solution to C. 

• An ICSP is called bound consistent if every constraint of it is. □ 
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This notion is motivated by a similar concept introduced in [14] in the case of constraints 
on reals. Note that if a constraint with interval domains is bound consistent, then both the 
constraint and each of its intervals is non-empty. 

Denote now by LINEQ an ICSP all constraints of which are linear equalities of the form (||) 
of Subsection liO and discussed above. 



Definition 5.4 Consider a LINEQ (j>. Let (jf denote the CSP obtained from (j> by replacing 
each integer domain [l..h] by the corresponding interval [l,h] of reals. We say that <j) is interval 
consistent if (jf is bound consistent. □ 

So <f) is interval consistent if for every constraint C of it the following holds: for every variable 
of C each of its two bounds participates in a solution to (jf . 



For example, the CSP (3a; — 5y = 4 ; x £ [3..9],y £ [1--4]) of Subsection 3.2 is bound 
consistent as both x = 3, y = 1 and x = 8, y = 4 are solutions of 3x — 5y = 4. 

In contrast, the CSP (j> := (2x + 2y - 2z = 1 ; x € [0..1],y £ [0..1],z £ [0..1]) is clearly not 
bound consistent but it is interval consistent. Indeed, the equation 2x + 2y — 2z = 1 has three 
solutions in the unit cube formed by the real unit intervals for x, y and z: (0,0.5,0), (1,0,0.5) and 
(0.5,1,1). So each bounds participates in a solution to (jf := (2x + 2y — 2z = 1 ; x £ [0, 1], y £ 
[0,1], z £ [0,1]). 

The following result now characterizes the outcome of a repeated application of the LINEAR 
EQUALITY rule. 

Theorem 5.5 Consider a LINEQ eft that is closed under the applications of the LINEAR 
EQUALITY rule. Then <f) is either failed or interval consistent. 

Proof. The intervals of reals corresponding to the integer intervals in the conclusion of the 
LINEAR EQUALITY rule are respectively smaller than those in the conclusion of the 7Z- 
LINEAR EQUALITY rule. So the assumption implies that (jf is closed under the applications 
of the K- LINEAR EQUALITY rule. 



Assume now that cf> is not failed. Then (jf is not failed either. By Theorem 15^ 



consistent, so a fortiori bound consistent. □ 



The example preceding the above theorem shows that interval consistency cannot be replaced 
here by bound consistency. In other words, to characterize the LINEAR EQUALITY rule it is 
needed to resort to a study of solutions over reals. 

Consider now a LINEQ CSP <f> and a derivation that consists solely of the applications of 
the LINEAR EQUALITY rule. As noticed before it is finite. Let ip be the final LINEQ CSP. 
So ip is closed under the applications of the LINEAR EQUALITY rule. By Theorem [T^ ip is 
failed or interval consistent. 

Assume now that <f> is not failed. Using the results of [§] (more specifically Theorem 13 
on page 47), we can then characterize ip as the largest interval consistent LINEX CSP that is 
smaller than <f> and equivalent to it. (The equivalence of ip and <j) is due to the fact that the 
LINEAR EQUALITY rvle is equivalent preserving.) This paper also shows how the applications 
of the LINEAR EQUALITY rule can be scheduled in a meaningful way by means of a generic 
chaotic iteration algorithm. The details should be clear to any reader of this paper but a detailed 
exposition here would take us too far afield. 

Similar characterizations results can be envisaged for other proof systems characterizing 
specific type of constraints. Such characterizations have been considered in the literature albeit 
not in a proof theoretical framework. 
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Let us cite just two examples. In [ 19 [ the constraint primitive alldistinct([xi , . . ., x n \) that 
states that the listed variables are all distinct was characterized using the arc consistency notion. 

Next, in Q the constraint primitive sort{[xi , . . ., x n ], [yi , . . ., y n ]) was characterized using the 
bound consistency notion. This constraint states that the second list is the sorted version of the 
first list; the variables are assumed to range over intervals. 

In each case an algorithm was provided that reduces the domains of the constraint under 
consideration so that the appropriate local consistency notion is satisfied. On a sufficiently 
abstract level these algorithms can be explained by means of reduction rules. 

We believe that such results allow us both to clarify and to characterize existing constraint 
solvers and to look for new ones. In this respect an interesting question is in what sense the 
rules of Section [| characterize the exactly (x,l,z) primitive. 
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